Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/5nlmxsBYZqrRx1jmPqfLEhvl_no.roa
File: 5nlmxsBYZqrRx1jmPqfLEhvl_no.roa (raw, json)
Hash identifier: 9Mn6rz4nDUFhru7O05uGEGFcjV4CZvAONJiVrIXlQB0=
Subject key identifier: E6:79:66:C6:C0:58:66:AA:D1:C7:58:E6:3E:A7:CB:12:1B:E5:FE:7A
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0197F5031361B91942BD23E9C9DBF1D6523A
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/5nlmxsBYZqrRx1jmPqfLEhvl_no.roa
Signing time: Thu 10 Jul 2025 15:45:08 +0000
ROA not before: Thu 10 Jul 2025 15:45:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a11:3086::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 14 Jul 2025 16:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f5:03:13:61:b9:19:42:bd:23:e9:c9:db:f1:d6:52:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jul 10 15:45:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e67966c6c05866aad1c758e63ea7cb121be5fe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:6d:6e:4e:8f:7e:dc:95:16:0f:eb:8d:9e:
7a:f0:60:46:f6:d3:93:54:1c:82:ce:29:4f:1f:f6:
45:86:f1:a6:8b:7d:5c:d5:bd:8a:2c:41:2a:4c:36:
31:de:10:88:0a:6b:6a:57:9f:be:e8:e0:2d:3c:b6:
a9:e5:f2:d5:f3:56:5a:ba:07:5d:06:5e:db:66:d2:
4e:78:2b:52:3e:18:91:13:4e:1f:b0:d2:a1:b5:77:
b9:18:47:1b:8e:14:ae:09:2a:89:e6:05:64:37:8e:
76:c8:43:a8:fd:03:68:4b:74:41:e0:4a:26:fc:2e:
22:cb:a2:00:e5:e3:13:29:d5:b8:bd:6d:e9:44:68:
b8:89:c5:37:d0:36:d1:10:fc:e9:85:62:da:90:56:
c7:72:b9:6a:5a:1b:9c:85:23:3c:18:56:08:86:b6:
b1:de:1f:a9:9d:5b:fb:92:13:16:76:3b:43:b9:d0:
1a:ac:d8:e3:40:a2:15:d8:76:57:01:36:45:bc:9e:
94:39:ff:91:ca:41:0a:c0:44:ab:80:a1:01:76:0b:
a9:08:bd:cc:63:0e:a7:cb:97:08:cf:5f:91:0d:a8:
70:01:5e:b1:c6:d2:33:ef:e0:2b:61:d7:b4:49:4c:
ba:4a:e0:68:ef:b7:1f:c2:df:1f:c9:cc:6d:d7:f7:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:79:66:C6:C0:58:66:AA:D1:C7:58:E6:3E:A7:CB:12:1B:E5:FE:7A
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/5nlmxsBYZqrRx1jmPqfLEhvl_no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3086::/32
Signature Algorithm: sha256WithRSAEncryption
37:2f:13:ea:45:63:a0:cb:5f:b9:06:1b:8d:9a:c2:45:81:85:
0e:f7:27:29:2f:05:13:b1:c1:f4:4e:38:a9:ce:98:16:cd:80:
86:02:94:1b:45:b9:cf:6f:53:4c:a8:6c:b9:cd:bf:99:d2:c0:
38:15:26:e6:fd:83:1a:81:6a:83:1a:00:b7:1c:92:c5:07:36:
bf:94:d7:5c:8e:3d:36:13:37:14:39:d4:7d:06:fe:39:70:2f:
4a:b4:56:5b:22:c2:35:b5:cb:73:d2:71:ff:21:52:01:9b:38:
4a:71:01:3c:37:e7:11:b4:9d:ff:bd:1f:14:03:2c:ff:c6:74:
99:b5:38:dd:64:68:e9:2e:a2:25:d9:c6:2f:76:f3:ee:40:82:
d3:75:c8:73:e0:18:c6:a6:8a:2a:4d:df:66:0b:42:49:64:26:
90:54:cc:48:cb:7b:e1:e8:5f:b6:be:ce:67:10:22:f1:c7:25:
b4:a7:bf:a9:df:b4:af:7c:80:31:bb:c4:2a:c1:ea:5e:55:36:
c1:64:80:a4:f7:b1:41:59:15:fd:cf:92:02:d8:19:34:0e:3b:
e6:08:22:07:1d:a6:5f:77:05:8c:cd:5c:72:1e:40:cd:75:3f:
e1:53:06:24:53:7b:07:6d:4c:0b:d3:ba:7a:b5:39:37:6e:b9:
e1:90:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:19:37 2025 by rpki-client